Veradigm
US healthcare data and software company.
Veradigm disclosed in a voluntary Item 8.01 filing dated 8 September 2026 that an unauthorised party used credentials taken from a vendor's environment to reach a Veradigm API and download patient data, in some cases including Social Security numbers.
Last refreshed: 12 October 2026 · Appears in 1 active topic
How did a vendor's leaked credentials expose Veradigm patient data?
Timeline for Veradigm
Filed a cyber disclosure under Item 8.01
Cybersecurity: Threats and Defences: Astrana Health files 8-K over phone spoofBackground
Veradigm is a US company that sells healthcare data and software. In an Item 8.01 8-K dated 8 September 2026 it disclosed that one of its third-party vendors had a cybersecurity incident.
According to the filing, an unauthorised party obtained credentials from the vendor's environment to a Veradigm application programming interface and downloaded copies of certain patient personal data, in some instances including Social Security numbers. Veradigm said it does not believe the incident is reasonably likely to have a material impact.
That choice matters under Securities and Exchange Commission practice: a company that judges a breach material reports it under Item 1.05, whereas Veradigm's Item 8.01 route is optional. Veradigm sat with CenterPoint Energy and Conduent on the optional side in September 2026, while Boston Scientific and Astrana Health took the material route.
